Russian APT RomCom combines Firefox and Windows zero-day …
13 hours ago · The no-click exploit launched in October infected computers in Europe and North America with the RomCom backdoor when victims were redirected through attacker-controlled websites.
RomCom Exploits Zero-Day Firefox and Windows Flaws in …
1 day ago · The Russia-aligned threat actor known as RomCom has been linked to the zero-day exploitation of two security flaws, one in Mozilla Firefox and the other in Microsoft Windows, as part of attacks designed to deliver the eponymous backdoor on victim systems. "In a successful attack, if a victim browses a web page containing the exploit, an adversary can run arbitrary code – without any user ...
Firefox and Windows zero-days exploited by Russian RomCom …
1 day ago · Russian-based RomCom cybercrime group chained two zero-day vulnerabilities in recent attacks targeting Firefox and Tor Browser users across Europe and North America. The first flaw (CVE-2024-9680 ...
Russia-linked hackers exploited Firefox and Windows bugs in …
1 day ago · Security researchers have uncovered two previously unknown zero-day vulnerabilities that are being actively exploited by RomCom, a Russian-linked hacking group, to target Firefox browser users and ...
Russian RomCom APT Group Leverages Zero-Day Flaws in Firefox…
20 hours ago · The vulnerability discovered in Mozilla’s Firefox, now assigned CVE-2024-9680 with a CVSS score of 9.8, has been exploited in the wild by Russia-aligned APT group RomCom. RomCom is also known as Storm-0978, Tropical Scorpius, or UNC2596. CVE-2024-9680 is a use-after-free bug in the animation timeline feature in Firefox.
Windows Zero-days & Firefox Vulnerability Exploited by RomCom …
2 days ago · The Firefox vulnerability stemmed from a use-after-free bug in the animation timeline feature, while the Windows vulnerability exploited an undocumented RPC endpoint in the Task Scheduler service. The combination of these vulnerabilities allowed attackers to bypass Firefox’s sandbox restrictions and elevate privileges on targeted systems.
RomCom exploits Firefox and Windows zero days in the wild
1 day ago · RomCom Firefox sandbox escape. A9D445B77F6F4E90C29E 385264D4B1B95947ADD5: PocLowIL.dll: Win64/Runner.AD: ... Award-winning news, views, and insight from the ESET security community
RomCom hackers chained Firefox and Windows zero-days to …
1 day ago · Russia-aligned APT group RomCom was behind attacks that leveraged CVE-2024-9680, a remote code execution flaw in Firefox, and CVE-2024-49039, an elevation of privilege vulnerability in Windows ...
Russian APT Chained Firefox and Windows Zero-Days Against US …
22 hours ago · A Russia-linked APT actor has been observed chaining two recent zero-day vulnerabilities in Firefox and Windows to deploy a backdoor on the victims’ machines, ESET reports. The hacking group, tracked as RomCom, Storm-0978, Tropical Scorpius, and UNC2596, has been conducting opportunistic and targeted campaigns against various sectors, as part ...
Russian hackers exploit Firefox, Windows zero-days in wild
1 day ago · In a blog post published Tuesday, ESET analyzed two previously unknown vulnerabilities that were chained together into a zero-click exploit. One is CVE-2024-9680, a critical vulnerability with a CVSS score of 9.8 that enables "vulnerable versions of Firefox, Thunderbird, and the Tor Browser to execute code in the restricted context of the browser." ." When chained with Windows Task Scheduler ...
- Some results have been removed